$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bbfe4b11-c0d2-4dad-9b87-df31a15b037f.roa File: bbfe4b11-c0d2-4dad-9b87-df31a15b037f.roa (raw, json) Hash identifier: 5Cr3M1TJVHRfqwz6loHyH7+cT+Z3goRs0I5OusmgqeM= Subject key identifier: 33:80:3A:DF:D6:D4:B0:68:CF:2D:98:A4:B9:75:34:3B:69:6C:A2:9E Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5F08CBB53D70366A8D85C685342D0602D06C2DE1 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bbfe4b11-c0d2-4dad-9b87-df31a15b037f.roa Signing time: Sat 23 Sep 2023 00:00:00 +0000 ROA not before: Sat 23 Sep 2023 00:00:00 +0000 ROA not after: Sat 28 Oct 2023 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f01:48c0::/47 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Sep 2023 12:11:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:08:cb:b5:3d:70:36:6a:8d:85:c6:85:34:2d:06:02:d0:6c:2d:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Sep 23 00:00:00 2023 GMT Not After : Oct 28 23:59:59 2023 GMT Subject: serialNumber=4f5b77f37caffbc1249aa0c886ba8abd0cb7c08e20dc017e62516697469e8342, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9f:81:f1:43:82:3e:32:eb:4d:d1:ec:c3:a2: a4:57:86:60:21:9d:a1:ee:34:3a:3d:1f:4c:94:db: e4:b1:f4:88:16:54:df:f0:b4:69:7d:80:a6:58:5d: 13:d6:56:68:d1:cf:78:4c:ed:63:4c:1d:8d:1d:e9: f3:db:87:90:0a:e9:ee:f5:02:6f:2c:8d:cd:79:49: 72:28:d6:de:a6:e2:d0:38:5b:ae:82:00:01:16:12: 93:03:7c:d5:2b:b9:4a:11:40:bf:e6:ba:65:63:79: ea:d6:f4:61:1f:0a:30:6f:b0:9e:f7:dc:82:01:f3: 7b:40:64:97:aa:5c:17:6a:c7:be:62:c7:a2:9e:37: c2:3c:7d:7f:ce:b7:05:b2:8d:9f:77:28:89:5f:1d: d9:af:b5:b4:3a:85:83:d5:44:ed:a8:f3:57:72:f8: 2a:3b:83:2b:29:ae:01:0e:8d:87:00:06:2f:42:13: a7:1a:43:94:6b:20:87:f0:15:b2:bb:d8:e9:a1:95: eb:61:7e:fe:05:18:ee:4f:61:05:de:59:3c:a6:5b: 25:7b:ff:87:2d:9a:bc:d2:41:a0:4c:0e:ab:05:c0: bc:9a:e0:5a:2b:38:ab:cc:15:75:f1:9c:01:cc:16: f5:12:6d:80:68:a5:39:ed:5a:0d:84:58:6f:68:4b: aa:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:80:3A:DF:D6:D4:B0:68:CF:2D:98:A4:B9:75:34:3B:69:6C:A2:9E X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/bbfe4b11-c0d2-4dad-9b87-df31a15b037f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f01:48c0::/47 Signature Algorithm: sha256WithRSAEncryption 7e:64:7b:d2:9a:76:30:b0:f9:38:30:5f:81:6a:ee:bb:bd:69: 1c:b7:e1:e8:55:e5:b4:c0:c7:4f:49:bf:e3:56:3f:10:4a:62: 14:1a:f9:4f:1f:a4:6b:8f:6e:4d:89:5a:b6:c1:58:03:b5:3f: 55:ca:16:06:33:3f:ab:90:8e:62:5d:0f:a0:e7:bf:b2:a5:47: a0:4b:d6:81:f9:db:2e:a2:b1:8e:fe:24:e4:14:b0:62:89:09: bf:d0:a8:83:b7:f1:cc:34:a3:6a:6a:21:33:a9:5c:04:21:9f: 65:4d:03:c3:9f:b1:3c:3b:b7:fb:20:cc:ab:28:cb:87:0f:31: 71:28:8b:2a:e7:50:89:dc:39:e6:de:87:cf:65:87:a4:04:31: 2c:ac:b2:c1:db:43:18:d2:cf:84:64:0c:71:5f:49:6d:75:cb: 5a:dd:1f:41:a4:4b:ee:e7:21:34:76:b0:80:63:a3:3f:d9:47: ea:7a:74:d8:5f:c8:47:19:df:2f:29:52:8f:d8:4a:5e:ce:2e: b8:3e:6b:a3:46:d9:e4:b3:33:64:44:f5:ef:94:97:84:4c:1c: 80:4d:fa:a3:36:05:1e:22:03:4f:4a:8d:27:d4:14:7e:47:d2: 89:6b:ab:56:7a:47:74:ec:14:af:4d:e1:78:df:c4:35:e8:c8: 2f:f5:f7:af -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUXwjLtT1wNmqNhcaFNC0GAtBsLeEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjMwOTIzMDAwMDAwWhcNMjMxMDI4MjM1OTU5 WjB6MUkwRwYDVQQFE0A0ZjViNzdmMzdjYWZmYmMxMjQ5YWEwYzg4NmJhOGFiZDBj YjdjMDhlMjBkYzAxN2U2MjUxNjY5NzQ2OWU4MzQyMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC3n4HxQ4I+MutN0ezDoqRXhmAhnaHuNDo9H0yU2+Sx9IgW VN/wtGl9gKZYXRPWVmjRz3hM7WNMHY0d6fPbh5AK6e71Am8sjc15SXIo1t6m4tA4 W66CAAEWEpMDfNUruUoRQL/mumVjeerW9GEfCjBvsJ733IIB83tAZJeqXBdqx75i x6KeN8I8fX/OtwWyjZ93KIlfHdmvtbQ6hYPVRO2o81dy+Co7gysprgEOjYcABi9C E6caQ5RrIIfwFbK72Omhlethfv4FGO5PYQXeWTymWyV7/4ctmrzSQaBMDqsFwLya 4ForOKvMFXXxnAHMFvUSbYBopTntWg2EWG9oS6qjAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUM4A639bUsGjPLZikuXU0O2lsop4wHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyL2JiZmU0YjExLWMwZDItNGRhZC05Yjg3LWRmMzFhMTViMDM3Zi5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwEmAB8BSMAwDQYJKoZIhvcNAQELBQADggEBAH5ke9KadjCw+TgwX4Fq7ru9 aRy34ehV5bTAx09Jv+NWPxBKYhQa+U8fpGuPbk2JWrbBWAO1P1XKFgYzP6uQjmJd D6Dnv7KlR6BL1oH52y6isY7+JOQUsGKJCb/QqIO38cw0o2pqITOpXAQhn2VNA8Of sTw7t/sgzKsoy4cPMXEoiyrnUIncOebeh89lh6QEMSysssHbQxjSz4RkDHFfSW11 y1rdH0GkS+7nITR2sIBjoz/ZR+p6dNhfyEcZ3y8pUo/YSl7OLrg+a6NG2eSzM2RE 9e+Ul4RMHIBN+qM2BR4iA09KjSfUFH5H0olrq1Z6R3TsFK9N4XjfxDXoyC/1968= -----END CERTIFICATE-----Generated at Sat Sep 23 00:46:20 2023 by rpki-client on console-fra.rpki-client.org